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2. 



With regard to the language, this report is based on the international application in the language in which it was filed, unless | 
otherwise indicated under this item. 

CZ] This report is based on a translation from the original language into the following language _ » 

which is the language of a translation furnished for the purposes of: 

j | international search (under Rules 1 2.3 and 23. 1 (b)) 

| | publication of the international application (under Rule 12.4) 

| [ international preliminary examination (under Rules 55.2 and/or 55.3) 

With regard to the elements of the international application, this report is based on (replacement sheets which have been l 
furnished to the receiving Office in response to an invitation under Article 14 are referred to in this report a^ originally filed | 
and are not annexed to this report): 



□ 



□ 



the international application as originally filed/furnished 
the description: 



as originally filed/furnished 



pages 



received by this Authority on 
received by this Authority on 



die claims: 
pages 



as originally filed/furnished 



as amended (together with any statement) under Article 19 



received by this Authority on 
received by this Authority on 



jPj the drawings: 



as originally filed/furnished 



received by this Authority on 
received by this Authority on 



□ 
□ 



a sequence listing and/or any related table(s) - see Supplemental Box Relating to Sequence Listing. 
The amendments have resulted in the cancellation of: 



□ 
□ 
□ 
□ 
□ 



the description, pages 
the claims, Nos. 



the drawings, sheets/figs 

the sequence listing (specify): . 

any table(s) related to the sequence listing (specify): 



□ 



This report has been established as if (some of) the amendments annexed to this report and listed below had not been 
made, since they have been considered to go beyond the disclosure as filed, as indicated in the Supplemental Box (Rule j 
70.2(c)). 



□ 
□ 
□ 
□ 
□ 



the description, pages 
the claims, Nos. 



the drawings, sheets/figs 

' the sequence listing (specify): 

any table(s) related to the sequence listing (specify): 



If item 4 applies, some or all of those sheets may be marked "superseded. " 
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1. I — 1 This report has been established as if no priority had been claimed due to the failure to furnish within the prescribed time 
' ' limit the requested: 

| | copy of the earlier application whose priority has been claimed (Rule 66.7(a)). 
| [ translation of the earlier application whose priority has been claimed (Rule 66.7(b)). 

2 I — I This report has been established as if no priority had been claimed due to the fact that the priority claim has been found 
1 — 1 invalid (Rule 64.1). Thus for the purposes of this report, the international filing date indicated above is considered to be the 
relevant date. 

3. Additional observations, if necessary: 

The priority is considered valid. Therefore, documents 
US2003105975 Al and US2002194489 Al are of no relevance for 
this report. 
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1. Statement 



Novelty (N) Claims 2-38 YES 

Claims 1 NO 

Inventive step (IS) Claims YES 

Claims 1-38 NO 

Industrial applicability (IA) Claims 1-38 YES 

Claims NO 



2. Citations and explanations (Rule 70.7) 

The invention defined in claims 1-38 relates to systems, 
methods and corresponding apparatus for repelling viruses in 
computers and computer networks. 

Traditional ant i -virus methods and systems can no longer 
reliably identify, detect and activate unknown computer 
viruses and their mutations. 



The problem to be solved by the invention is therefore to 
avoid the above mentioned weaknesses present in traditional 
anti-virus methods and systems. 

Reference is made to the following documents: 
Dl: US 2002095607 Al 
D2: US 2002116639 Al 
D3: WO 0036515 Al 

Dl relates to virus and intrusion protection devices for 
computer and computer networks. In Dl, an apparatus installed 
between the actual core part of a computer and an external 
network; named a network board; is used to detect and identify 
new unknown viruses before the network board allows the 
connection to be executed to the rest of the computer (see 
paragraphs [009] - [0012] ) . 

D2 describes a method and apparatus for handling and 
eliminating a virus in a network data processing system. In 
D2, each client computer is loaded with a software agent known 
as a virus scanner and notifier (VSN) that immediately 
notifies the virus scanner controller (VSC) residing at a 
server in the network (see paragraph [0028] ; figure 1-2, 
abstract; paragraphs [0007] - [0009] ; [0028] - [0030] ; [0050] , 
[0056] ) . 

» . . / ... 
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D3 relates to a method, system and apparatus for isolating a 
computer system upon detection of viruses and similar data 
(see page 2, line 1 - page 3, line 9; figure 1; and claims 1- 

2) . 

The invention is based on the active search and recognition of 
yet unknown viruses. The virus activation/detection system of 
the invention in a timed manner executes actions that may 
cause a virus to activate. 

In Dl, detection of yet unknown viruses at the network board 
would make limited damage to the board, thus activated and the 
damage is kept local to the board wherein an attempt to catch 
and repair the damage is performed (see [0021] - [0021] , and 
[0022] - [0024] ) . 

Thus, the method in Dl does take actions as new unknown 
viruses are caught and the remaining part of the system is in 
that way successfully separated from the external network in 
order to hinder attempts to intrude. The same reasoning is 
used by the applicant on page 20, lines 26-36. 

Therefore, additional arguments presented in the written 
opinion (see below) concerning claims 1-38 are still used in 
this report. 



The claimed invention according to claim 1 describes a 
security system for repelling viruses. The system includes a 
first sub- system adapted in connection with the forwarding of 
messages to detect unknown viruses and to perform one action 
to activate the unknown viruses. 

Document Dl discloses a security system for repelling viruses. 
The system as illustrated in Dl (see figure 1 and paragraph 
[0009] ) , shows a security system which includes a Network 
Board (reference 22 in figure 1) acting as the sub-system of 
claim 1. 

The Network Board is also adapted in connection with the 
forwarding of messages to detect unknown viruses and to 
perform one action to activate the unknown viruses. 



Claim 1 



.../ 
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The detection and action taken by the network board are 
described in Dl (see paragraphs [0020] - [0021] , [0011] ) . 
Therefore, the claimed invention according to the wording of 
claim 1 lacks novelty. 



According to claim 2, the security system is adapted to 
forward an alarm caused by the detection of a virus to a 
system connected to the security system. In Dl, an IT alert 
check (see figure 1, reference 48) software is present acting 
as an additional safeguard in case unknown viruses might be 
present. The IT check software residing in the sub-system 
might be connected to an IT department or an ISP. The ISP or 
IT department creates an "alert bulletin board" posting any 
new viruses. The IT check software automatically accesses the 
bulletin board residing at the ISP. Thus, alarms caused by the 
detection of new possible viruses are forwarded between the 
ISP and the IT alert check software of the network board. The 
claimed invention according to claim 2 is therefore considered 
to lack an inventive step. 



As an additional safety guard, a switching mechanism can be 
used to disconnect the sub- system described in Dl from other 
systems (external network or main core of computer) (see 
figure 1, paragraph [0023] , and claims 11 and 13) . Thus, the 
switch used in Dl can be used to disconnect the sub- system in 
case an alarm caused by the detection of a virus is received. 
The claimed invention according to claim 3 is therefore 
considered to lack an inventive step. 

Claims 4-9 

The claimed invention according claims to 4-9 describes only 
obvious embodiments that are considered obvious to a person 
skilled in the art. These claims are therefore not considered 
to involve an inventive step. 

Claim 10, 24 

In Dl, two separate connections are handled by the switch: 
connection A towards the external network is connected to the 
network board; and connection B is used between the network 



Claim 2 



Claim 3 
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board and the main core. Thus, the claimed invention according 
to claim 10, 24 lacks an inventive step. See also D3 (figure 
1) , where two separate communication channels are used for 
isolating the virus in case it is detected. 



Claims 11-19, 21-23, 25-30, 32-38 

Taking the prior art known from Dl and D2 into account, claims 
11-19, 21-23, 25-30, 32-38 are considered to describe the 
invention through features well known in the art. Hence, the 
invention according to these claims is considered to lack an 
inventive step. 
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Publication date 
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Filing date 
(day/month/year) 



25/11/2002 
27/11/2001 



Priority date (valid claim) 
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2. Non-written disclosures (Rule 70.9) 

Date of written disclosure 

Kind of non-written disclosure Date of non-written disclosure referring to non-written disclosure 

(day/month/year) (day/month/year) 
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